Forum Discussion

Tyron_Fourie_18's avatar
Mar 10, 2017

HTTPS Virtual Servers on 8000/8011 not working

Hello everyone!

I am having an issue I am hoping to get some help with.

Setup:

1 HTTPS Virtual Server with IP a.a.a.a port 443 doing SSL offloading to b.b.b.b on port 80. Site A Working! 1 HTTPS Virtual Server with IP a.a.a.a port 8000 doing SSL offloading to b.b.b.b on port 8000. Site B not working. 1 HTTPS Virtual Server with IP a.a.a.a port 8011 doing SSL offloading to b.b.b.b on port 8011. Site C not working.

I have deployed all 3 with the F5 HTTP iApp. I am seeing no traffic to my pools for site B and C.

I am getting this from both sites B and C in a tcp dump:

Transmission Control Protocol, Src Port: 65265, Dst Port: 8011, Seq: 0, Len: 0
    Source Port: 65265
    Destination Port: 8011
    [Stream index: 0]
    [TCP Segment Len: 0]
    Sequence number: 0    (relative sequence number)
    Acknowledgment number: 0
    Header Length: 32 bytes
    Flags: 0x002 (SYN)
        000. .... .... = Reserved: Not set
        ...0 .... .... = Nonce: Not set
        .... 0... .... = Congestion Window Reduced (CWR): Not set
        .... .0.. .... = ECN-Echo: Not set
        .... ..0. .... = Urgent: Not set
        .... ...0 .... = Acknowledgment: Not set
        .... .... 0... = Push: Not set
        .... .... .0.. = Reset: Not set
        .... .... ..1. = Syn: Set
            [Expert Info (Chat/Sequence): Connection establish request (SYN): server port 8011]
                [Connection establish request (SYN): server port 8011]
                [Severity level: Chat]
                [Group: Sequence]
        .... .... ...0 = Fin: Not set
        [TCP Flags: ··········S·]
    Window size value: 8192
    [Calculated window size: 8192]
    Checksum: 0x66c3 [unverified]
    [Checksum Status: Unverified]
    Urgent pointer: 0
    Options: (12 bytes), Maximum segment size, No-Operation (NOP), Window scale, No-Operation (NOP), No-Operation (NOP), SACK permitted
    [SEQ/ACK analysis]
        [iRTT: 0.000018000 seconds]
        [TCP Analysis Flags]
            [Expert Info (Note/Sequence): This frame is a (suspected) spurious retransmission]
                [This frame is a (suspected) spurious retransmission]
                [Severity level: Note]
                [Group: Sequence]
            [Expert Info (Note/Sequence): This frame is a (suspected) retransmission]
                [This frame is a (suspected) retransmission]
                [Severity level: Note]
                [Group: Sequence]

Anyone have any ideas what might be the issue here? I can post more info if need be.

2 Replies

  • Can you post the virtual server and pool configuration? Can you also post just the first lines of the packets from the F5 point of view, showing client side and server side? Let's just focus in one of the servers now, as the problem in virtual server B and C are likely to be the same.

     

  • I would recommend trying a simple curl command like this to see the response:

    curl -IL https://domain.com:8000